CVE-2026-43353— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 9ad9a52cce2828d932ae9495181e3d6414f72c07< b684b420a5bb0ea1b0e13abfdb8ce41c5266e62e | affected |
9ad9a52cce2828d932ae9495181e3d6414f72c07< 4faa1e9c67a2229f6749190aedaf88ce0391efd2 | affected | ||
9ad9a52cce2828d932ae9495181e3d6414f72c07< 1dca8aee80eea76d2aae21265de5dd64f6ba0f09 | affected | ||
5.11 | affected | ||
< 5.11 | unaffected | ||
6.18.19≤ 6.18.* | unaffected | ||
6.19.9≤ 6.19.* | unaffected | ||
7.0≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-43353の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue The HCI DMA dequeue path (hci_dma_dequeue_xfer()) may be invoked for multiple transfers that timeout around the same time. However, the function is not serialized and can race with itself. When a timeout occurs, hci_dma_dequeue_xfer() stops the ring, processes incomplete transfers, and then restarts the ring. If another timeout triggers a parallel call into the same function, the two instances may interfere with each other - stopping or restarting the ring at unexpected times. Add a mutex so that hci_dma_dequeue_xfer() is serialized with respect to itself.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于DMA环出队路径存在竞争条件，可能导致多个超时传输同时调用时相互干扰。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-43353の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-43353のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-43353 补丁与修复 (3)
Same Patch Batch · Linux · 2026-05-08 · 197 CVEs total
| CVE-2026-43304 | 9.8 CRITICAL | libceph: define and enforce CEPH_MAX_KEY_LEN |
| CVE-2026-43384 | 9.8 CRITICAL | net/tcp-ao: Fix MAC comparison to be constant-time |
| CVE-2026-43402 | 9.8 CRITICAL | kthread: consolidate kthread exit paths to prevent use-after-free |
| CVE-2026-43341 | 9.8 CRITICAL | net/ipv6: ioam6: prevent schema length wraparound in trace fill |
| CVE-2026-43376 | 9.8 CRITICAL | ksmbd: fix use-after-free by using call_rcu() for oplock_info |
| CVE-2026-43379 | 9.8 CRITICAL | ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() |
| CVE-2026-43378 | 9.8 CRITICAL | smb: server: fix use-after-free in smb2_open() |
| CVE-2026-43414 | 9.8 CRITICAL | scsi: qla2xxx: Completely fix fcport double free |
| CVE-2026-43465 | 9.8 CRITICAL | net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ |
| CVE-2026-43383 | 9.4 CRITICAL | net/tcp-md5: Fix MAC comparison to be constant-time |
| CVE-2026-43406 | 9.1 CRITICAL | libceph: prevent potential out-of-bounds reads in process_message_header() |
| CVE-2026-43407 | 9.1 CRITICAL | libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() |
| CVE-2026-43322 | 8.8 HIGH | Bluetooth: hci_sync: Fix UAF in le_read_features_complete |
| CVE-2026-43334 | 8.8 HIGH | Bluetooth: SMP: force responder MITM requirements before building the pairing response |
| CVE-2026-43284 | 8.8 HIGH | xfrm: esp: avoid in-place decrypt on shared skb frags |
| CVE-2026-43403 | 8.8 HIGH | nsfs: tighten permission checks for ns iteration ioctls |
| CVE-2026-43391 | 8.8 HIGH | nsfs: tighten permission checks for handle opening |
| CVE-2026-43291 | 8.3 HIGH | net: nfc: nci: Fix parameter validation for packet data |
| CVE-2026-43365 | 8.2 HIGH | xfs: fix undersized l_iclog_roundoff values |
| CVE-2026-43466 | 8.2 HIGH | net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery |
Showing 20 of 197 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-53277
KVM: arm64: Take the SRCU lock for page table walks in fault - CVE-2026-53276
Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer - CVE-2026-53275
ipv6: mcast: Fix use-after-free when processing MLD queries - CVE-2026-53274
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing - CVE-2026-53273
tee: optee: prevent use-after-free when the client exits bef
同じベンダー: Linux
- CVE-2026-53277
KVM: arm64: Take the SRCU lock for page table walks in fault - CVE-2026-53276
Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer - CVE-2026-53275
ipv6: mcast: Fix use-after-free when processing MLD queries - CVE-2026-53274
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing - CVE-2026-53273
tee: optee: prevent use-after-free when the client exits bef
V. CVE-2026-43353へのコメント
まだコメントはありません